ugc-mobile
Fail
Audited by Snyk on Mar 3, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 1.00). The prompt's top-level description forbids showing screen content or app UI, yet multiple templates (e.g., Format 2 and Format 11) explicitly instruct showing or flashing the app interface, which contradicts the stated scope and thus constitutes hidden/deceptive instructions outside the skill's claimed purpose.
Audit Metadata